Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtp (Exim 4.84_2) (envelope-from ) id 1dLtNH-0002Cv-TV for pgsql-hackers@arkaria.postgresql.org; Fri, 16 Jun 2017 15:41:28 +0000 Received: from localhost ([127.0.0.1] helo=postgresql.org) by malur.postgresql.org with smtp (Exim 4.84_2) (envelope-from ) id 1dLtNH-00046C-BX for pgsql-hackers@arkaria.postgresql.org; Fri, 16 Jun 2017 15:41:27 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1dLtNF-00042r-DY for pgsql-hackers@postgresql.org; Fri, 16 Jun 2017 15:41:25 +0000 Received: from momjian.us ([72.94.173.45]) by magus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.84_2) (envelope-from ) id 1dLtNC-0005ww-DR for pgsql-hackers@postgresql.org; Fri, 16 Jun 2017 15:41:24 +0000 Received: from bruce by momjian.us with local (Exim 4.84_2) (envelope-from ) id 1dLtN7-0003gh-Do; Fri, 16 Jun 2017 11:41:17 -0400 Date: Fri, 16 Jun 2017 11:41:17 -0400 From: Bruce Momjian To: Andres Freund Cc: Stephen Frost , Robert Haas , Peter Eisentraut , Ants Aasma , PostgreSQL-development Subject: Re: WIP: Data at rest encryption Message-ID: <20170616154117.GL11450@momjian.us> References: <20170615202942.GA20904@momjian.us> <20170615211201.GC8443@momjian.us> <20170615224108.GC1769@tamriel.snowman.net> <20170615231302.GA11450@momjian.us> <20170615232755.GD1769@tamriel.snowman.net> <20170615234443.GE11450@momjian.us> <20170615235636.7rk3mhbww6h2f5zp@alap3.anarazel.de> <20170616000805.GG11450@momjian.us> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20170616000805.GG11450@momjian.us> User-Agent: Mutt/1.5.23 (2014-03-12) List-Archive: List-Help: List-ID: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: X-Mailing-List: pgsql-hackers Precedence: bulk Sender: pgsql-hackers-owner@postgresql.org On Thu, Jun 15, 2017 at 08:08:05PM -0400, Bruce Momjian wrote: > On Thu, Jun 15, 2017 at 04:56:36PM -0700, Andres Freund wrote: > > how few concerns about this feature's complexity / maintainability > > impact have been raised. > > Yeah, I guess we will just have to wait to see it since other people are > excited about it. My concern is code complexity and usability > challenges, vs punting the problem to the operating system, though > admittedly there are some cases where that is not possible. I know some OS's can create file systems inside files. Can you encrypt such file storage as non-root? I assume that is just too odd. -- Bruce Momjian http://momjian.us EnterpriseDB http://enterprisedb.com + As you are, so once was I. As I am, so you will be. + + Ancient Roman grave inscription + -- Sent via pgsql-hackers mailing list (pgsql-hackers@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-hackers